Tore Nestenius | MVP
LightNews LightNews
tndata.bsky.social
Tore Nestenius | MVP
@tndata.bsky.social
470 followers 280 following 27 posts
.NET, Azure Cloud, and security trainer and consultant. Microsoft .NET MVP
Posts Replies Media Videos
Reposted by Tore Nestenius | MVP
tndata.bsky.social
🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news
BFF in ASP.NET Core #7 - Introducing the Duende BFF Library
Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.
nestenius.se
August 20, 2025 at 7:43 AM
tndata.bsky.social
🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news
BFF in ASP.NET Core #7 - Introducing the Duende BFF Library
Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.
nestenius.se
August 20, 2025 at 7:43 AM
tndata.bsky.social
BFF Series #6 is live: Securing Your BFF with CORS

Just published my guide to implementing production-ready CORS policies for BFF architectures.

✅ Why "AllowAnyOrigin" is dangerous
✅ Strict origin configuration
✅ ASP.NET Core examples

nestenius.se/net/bff-in-a...

#aspnetcore #cors #dotnet #oidc
BFF in ASP.NET Core #6 - Securing our BFF with CORS
Learn how to secure your ASP.NET Core Backend-for-Frontend (BFF) with robust CORS protection. Prevent cross-origin attacks, implement preflight requests, and add custom middleware for enhanced securit...
nestenius.se
August 14, 2025 at 11:25 AM
tndata.bsky.social
🔄 BFF Pattern Series Part 5: Automatic Token Renewal

Learn how to implement seamless token renewal in ASP.NET Core that your users will never notice.

nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #bff #oauth #oidc #mvpbuzz
August 6, 2025 at 1:46 PM
tndata.bsky.social
🛠️ BFF Pattern Series #4: Building Your First BFF from Scratch

Theory → Practice. Part 4 is live!

✅ ASPNET Core
✅ Real OpenID Connect integration
✅ Secure API proxying
✅ Zero tokens in the browser

🔗 nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #oidc #mvpbuzz
July 30, 2025 at 7:14 AM
tndata.bsky.social
BFF Pattern Series #3 is live!

You moved tokens out of the browser, but is your
session cookie actually secure?

Learn how to properly protect cookies with:
✅ HttpOnly
✅ SameSite
✅ __Host- prefixes
and more...

nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #mvpbuzz
July 23, 2025 at 8:10 AM
tndata.bsky.social
🔐 BFF Pattern Series Part 2 is live!

Learn why storing tokens in browsers is no longer acceptable and how the BFF pattern became the gold standard for SPA security.

Your SPA handles UI. Your BFF handles security!

👉 nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #security #bff
July 17, 2025 at 1:26 PM
tndata.bsky.social
🚀 New series: Securing SPAs with the BFF Pattern
Stop storing tokens in the browser!

My new blog series shows how to eliminate XSS risks using Backend-for-Frontend in asp.net Core.

Part 1: nestenius.se/net/implemen...

#aspnetcore #dothet #security #mvpbuzz
July 11, 2025 at 8:24 AM
tndata.bsky.social
How to use KurrentDB for Event Sourcing in C# on Azure?

🚀 Deploy it with PowerShell
⚙️ Connect from .NET
📦 Write and read events
🔍 Inspect with Kurrent Navigator

Full guide 👉 nestenius.se/net/how-to-u...

@kurrent-io.bsky.social
#KurrentDB #EventSourcing #CQRS #dotnet #DDD #Azure #mvpbuzz
LinkedIn
This link will take you to a page that’s not on LinkedIn
lnkd.in
May 13, 2025 at 1:06 PM
Reposted by Tore Nestenius | MVP
aspnetcore.news
Configuring ASP .NET Core Forwarded Headers Middleware by @tndata.bsky.social nestenius.se/net/configur... #aspnetcore
April 11, 2025 at 5:29 PM
tndata.bsky.social
New blog post 📝

Running ASP.NET Core behind a proxy?
Then you need to configure ForwardedHeadersMiddleware the right way.

✅ Trust proxy IPs
✅ Handle X-Forwarded-* headers
✅ Avoid broken IPs, schemes & hosts

Read it 👉 nestenius.se/net/configur...
#aspnetcore #proxy #mvpbuzz
𝐍𝐞𝐰 𝐛𝐥𝐨𝐠 𝐩𝐨𝐬𝐭: 𝐂𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞
April 10, 2025 at 9:17 AM
tndata.bsky.social
🚀 .NET 10 Preview 1 is here! 🎉

The next LTS release brings:
✅ Faster JIT & AVX 10.2 support
✅ Blazor & Minimal API improvements
✅ New C# 14 features
✅ EF Core & .NET MAUI updates

Check out what’s new! 🔗👇
🔗 learn.microsoft.com/en-gb/dotnet...

#dotnet #aspnetcore
February 25, 2025 at 9:30 PM
Reposted by Tore Nestenius | MVP
oredev.org
Are you ready? 🏃‍♀️🏃‍♂️
The Call for Papers for #Oredev2025 opens in just a few days!

More info on how to prepare on our website! 👉 oredev.org/callforpaper
February 24, 2025 at 8:07 AM
Reposted by Tore Nestenius | MVP
aspnetcore.news
Exploring the Forwarded Headers Middleware in ASP .NET Core by @tndata.bsky.social https://buff.ly/3EbJB8v #aspnetcore
January 24, 2025 at 9:21 PM
tndata.bsky.social
🚀 New blog post: 𝐄𝐱𝐩𝐥𝐨𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

Lost client IPs? Incorrect URLs? Proxies like load balancers or TLS terminators causing trouble?

nestenius.se/hardware/exp...

#ASPNetCore #Proxy #dotnet
Exploring the Forwarded Headers Middleware in ASP.NET Core
January 23, 2025 at 10:27 AM
tndata.bsky.social
Excited to hear @madskristensen.net’s keynote at #TechPassionDay in Copenhagen! Learning about Building Lovable Software for Millions of Users—can’t wait! #Innovation #SoftwareDevelopment
January 22, 2025 at 8:35 AM
Reposted by Tore Nestenius | MVP
aspnetcore.news
AdditionalAuthorizationParameters in ASP .NET Core 9 by @tndata.bsky.social https://buff.ly/40l1YjT #aspnetcore
January 9, 2025 at 9:44 AM
Reposted by Tore Nestenius | MVP
erikej.bsky.social
.NET Aspire Quick Tip – Managing Container & Data Lifetime
.NET Aspire Quick Tip - Managing Container & Data Lifetime - .NET Blog
.NET Aspire 9 adds new control over the lifetime of containers on your local developer environment. Let's look at how to manage them with the new APIs!
buff.ly
January 8, 2025 at 9:22 AM
tndata.bsky.social
Simplify OpenID-Connect in ASP.NET Core 9 with 𝐀𝐝𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐏𝐚𝐫𝐚𝐦𝐞𝐭𝐞𝐫𝐬! 🎉

No more clunky workarounds—easily customize & maintain authentication flows.

Learn more here: nestenius.se/net/addition...

#dotnet #OIDC #Authentication #aspnetcore
AdditionalAuthorizationParameters in ASP.NET Core 9
January 7, 2025 at 2:42 PM
tndata.bsky.social
What a great way to start the new year!

I’m thrilled to share that I’ve received my first Microsoft MVP Award in .NET.

Huge thanks to everyone who supported me!

I can’t wait to continue exchanging ideas with all of you!
@mvpaward.bsky.social

#dotnet #MVPBuzz
January 1, 2025 at 3:06 PM
tndata.bsky.social
🚀 Wrapping up my @duendesoftware.com IdentityServer + Docker series!

🔑 Fixing sign-out
🔑 Using ID tokens for safe session handling
🔑 The id_token_hint

nestenius.se/net/identity...

#IdentityServer #Authentication #ASPNetCore #dotnet
December 16, 2024 at 8:50 AM
Reposted by Tore Nestenius | MVP
aspnetcore.news
IdentityServer in Docker Containers: HTTPS and SameSite (Part 3) by @tndata.bsky.social https://buff.ly/3ZJA3de #aspnetcore
December 10, 2024 at 9:21 PM
tndata.bsky.social
🔒 Secure your IdentityServer with HTTPS in Docker Compose! 🚀

In part 3 of my series, I show you how to:
✅ Fix cookie restrictions blocking auth
✅ Use self-signed certs for HTTPS
✅ Configure HTTPS in Kestrel

👉 nestenius.se/net/identity...

#IdentityServer #dotnet #ASPNetCore @duendesoftware.com
IdentityServer in Docker Containers: HTTPS and SameSite (Part 3) In this third part of the series, we tackle login issues in IdentityServer caused by cookie restrictions in HTTP and show how to resolve them by implementing HTTPS. We’ll guide you through securing communication between the host, client, and IdentityServer containers and configuring HTTPS in Docker to ensure everything runs smoothly.
December 9, 2024 at 10:55 AM
tndata.bsky.social
Struggling to containerize Duende IdentityServer? 🐳

Part 2 of my series tackles a key challenge: making IdentityServer and client apps work in Docker!

Read more at nestenius.se/net/identity...

#aspnetcore #identityServer #dotnet @duendesoftware.com
IdentityServer in Docker Containers: Networking (Part 2)
Part 2 in the series on containerizing IdentityServer tackles networking challenges. Learn to resolve back-channel issues and more.
nestenius.se
December 2, 2024 at 10:42 AM
tndata.bsky.social
Struggling to containerize Duende IdentityServer with Docker? 🚢

I’ve written a step-by-step guide to:
✅ Set up IdentityServer in containers
✅ Solve localhost issues
✅ Code examples

🔗 nestenius.se/net/identity...

@duendesoftware.com #identityserver #oidc #dotnet #aspnetcore
November 25, 2024 at 9:29 AM